Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.c > #141138

Re: 7 out of 10 Microsoft Windows patches address memory issues from C/C++ code

From Ben Bacarisse <ben.usenet@bsb.me.uk>
Newsgroups comp.lang.c, comp.lang.c++
Subject Re: 7 out of 10 Microsoft Windows patches address memory issues from C/C++ code
Date 2019-02-18 18:34 +0000
Organization A noiseless patient Spider
Message-ID <875zth9c98.fsf@bsb.me.uk> (permalink)
References <q4ei2f$r4l$1@dont-email.me>

Cross-posted to 2 groups.

Show all headers | View raw


"Rick C. Hodgin" <rick.c.hodgin@gmail.com> writes:

> https://www.fudzilla.com/news/pc-hardware/48123-more-than-70-percent-of-microsoft-patches-are-for-memory-problems
>
>     "More than 70 percent of Microsoft patches are for memory safety bugs.
>
>     "Speaking to the assembled throngs at an Israel Security conference,
>      a Microsoft engineer Matt Miller said that memory safety bugs happen
>      when software, accidentally or intentionally, accesses system memory
>      in a way that exceeds its allocated size and memory addresses.
>
>     "He said that over the the last 12 years, around 70 percent of all
>      Microsoft patches were fixes for memory safety bugs.

I wonder if any explanation was offered as to why so many of these bugs
were found by people who probably had no access to the source code
rather than by people doing code reviews and testing.

If these are, in fact, the result of internal review, then the timing
just needs to be altered.

If these are being found internally before release, then it's bug fixing
and not really headline news.

Not that that lets C off the hook, but it does look like an exercise in
looking everywhere but on your own doorstep.  (That's from the limited
quotes -- there's no link to what was actually said.)

-- 
Ben.

Back to comp.lang.c | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

7 out of 10 Microsoft Windows patches address memory issues from C/C++ code "Rick C. Hodgin" <rick.c.hodgin@gmail.com> - 2019-02-18 10:15 -0500
  Re: 7 out of 10 Microsoft Windows patches address memory issues from C/C++ code "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2019-02-19 00:28 +0800
  Re: 7 out of 10 Microsoft Windows patches address memory issues from C/C++ code Ben Bacarisse <ben.usenet@bsb.me.uk> - 2019-02-18 18:34 +0000
    Re: 7 out of 10 Microsoft Windows patches address memory issues from C/C++ code "I Set My Girlfriend's Pantyhose on Fire" <cdalten@gmail.com> - 2019-02-21 13:35 -0800

csiph-web